Bitcoin Forum

I thought I could never be fooled by a phishing page, but today i came across something that was almost fatal for me.
Someone posted a news on a telegram channel that was somehow coming from cointelegraph, saying that MEW had a new vulnerability which hackers could take advantage of, at first view one wouldn't tell it's a scam, especially me with a dusty laptop monitor, the l from the link was with a dot under it, also the link for MEW from that post had a dot under the e letter.

Here is a screenshot of the scam, be careful and pay very good attention to the link, it even has ssl certificate https.

https://i.imgur.com/vSY5PPk.png

I heard this happened to some people and thought they just weren't very knowledgeable about phishing but then it happened to my friend yesterday and he has a great knowledge about this thing.
And now thanks to your picture i get why... If i went these last few days to MEW i would also fall victim.
I must admit it :D Thanks for letting us know man!

These were very popular on slacks during the past months.. Anyone who today falls for that has been been living under a rock.

Thanks for the warning. One should not trust their ether wallets with others. I prefer that only the user knows about his/her wallet.

That is pretty crafty of the scammers. This is why you need to carefully type in the address yourself or use a bookmark of the known good page. If one is in a hurry or nervous about the hack and being compensated, I can see how they would miss the small signs indicating they are at the wrong site. Thanks for the warning and putting up a screenshot of the scam site so we know what to look out for.

this is a great salvation. It is clearly a warning to the entire platform.....
thanks man....

Thank you for the warning. These phishing attacks are spreading like a plague. Original MEW has currently the big red warning on top saying "DON'T GET PHISHED 🎣 1. BOOKMARK MYETHERWALLET.COM RIGHT NOW 2. INSTALL EAL or MetaMask." and this is probably the reason for it.

Thats why you need to make sure you bookmark the real page, that way it is a fairly easy check. Along with the US LLC

Wallet information are very important, let it be known only by yourself. Some hackers and phishers are just out there waiting for perfect opportunity to scam. Do not ever share your wallet information to anyone and any site, let us all be safe and vigilant. Thanks for sharing this.

Myetherwallet is one of the most used websites to do pishing, because it is a very simple website and it does not need a huge coding developer in order to create a similiar template.

In fact, most hackers tend to send burst email from myetherwallet fake emails, and the user is usually falling in those emails and always login up from that link.

And i have read several stories like this, they are always the same, they just put their private key in there, and they forget that they are in a pishing site.

And maybe in a day, or two, they found their wallet empty, and they dont even know what happened.

I'll be more careful when dealing MEW in a untrusted site or phishing site. giving private key is a big No. No! so i will keep it secret or save it in a storage box

I came across this one posted here on the forum before and luckily that then helped me to identify it myself when seeing it posted in telegram. It simply looks like a spec of dust on the screen. Thank you for posting as there's a good chance you'll stop many of these phishers attempts in the future by raising awareness.

Yeah on a small screen it is hard to identify the dot below the letter, I looked at it 20 times before i spotted the little detail in the link.

Thank you for giving us a warning to avoid scam.
Another thing is phising sites if you input wrong word sample MyEthereumWallet.com this is a scam site dont go and dont inputnyour private key.

Thanks for the information I guess I have to be very careful with these sites these days.

Just one quick question though. Do you know how these guys tend to get emails our personal emails or any information that can prevent them getting our personal details would be really appreciated.

It is full of those pishing sites at the moment, but there is nothing new with that.

I am getting aprox 3 to 4 emails a day about pishing sites, a lot of them are from MyEtherWallet, and a few from the blockchain.info wallet, it is very annoying, but i dont use that email anymore because of that.

The same happen with those annoying emails that i get from some "crypto" related telegram groups (about 2 a day from those crappy groups)

Myetherwallet is probably the most pished site.

I wish i would have the answer to that question too, someone who knows it feel free to answer it here.

You broke one of the most important and yet the easiest rule about online wallets or exchanges  " Never visit a wallet/exchange page from links that been sent threw mails , chats or any external source " . It is pretty much easy rule to follow . Personally when I see messages like this in my mail or chat ( BTW I got punch of them ) I go direct to my bookmarked pages and check to see if this is true , I never follow an external link . People really need to change there habits and work there minds a little before acting .

I see how some people may fall for it.
However, that warning message on the phishing page could never have fooled me.

https://i.imgur.com/FJ1JLAQ.jpg]https://i.imgur.com/FJ1JLAQ.jpg

all these scams are really tiring, transfer cryptocurrency becomes a real obstacle course!

Also, there's a quick crash course about blockchain and cryptos when you open MEW. They warn the users about security in details and they also advice to use a hardware wallet because in that case you don't have to compromise your private key just let the hardware wallet do the signature part and you are safe.
Using bookmarked pages of MEW and e.g. a Ledger Nano S or a Trezor will let you worry less about your hard earned coins

They have notifications in their website be sure not to open any email add that hackers needs to grab your tokens. don't give your private keys coz it will harm your MEW.

MEW has taken an extra step to warn users about these phishing attempts and some of the features you need to look for to ensure you are on the right website. You could also bookmark the legit site to avoid falling for such and thanks for the heads up.

I was once the victim, when I realized I had immediately transferred all my tokens to another MEW. I do not want to take risks, and stay cautious with links given people you do not know.

thanks for the information, it's amazing to have to be wary of everything

That quick crash course is a big help because that would warn the people when accessing the site. There are so many phishing attempts nowadays and I receive it in e-mail everyday. They are automatically in my spam folder anyway and the best way to access the sites is by bookmarking it and never click any links sent to you. Most of the victim of it are the newbies who will just easily believe anything they read so for us who already know what kind of things those scammers do, we should warn others as much as we can.

thank you for this info. I heard from my friend that many hackers want to attack MEW and stolen the tokens inside the account. we need to take attention for this especially if we have many tokens in our account. but I am sure that MEW will secure the site and protect their customer so the customer doesn't have too worried about this. but we need to be careful with this.

Always check the url if its correct or not. Mew always maling advice to thier users to check always the  url.
The exact address should be myetherwallet.com  and nothing else .

Thanks for sharing, that dot under e is really hard to spot, first i didn't notice it because i thought it was dust or something on my monitor.
Sneaky one I have to admit.
With all these warnings I am surprised that people still click on links which they get in slack or email.

Thanks for sharing this information. It is worrisome how people's wallets are being targets by these hackers. Everyone just have to be careful.

OP you are describing phishers into hackers, their descriptions aren't the same. MEW is the victim, the real MEW and these phishers are too smart enough to replace lower case "L" into uppercase 'i' to make it look like myetherwaIIet.

When you'll type capital 'i' on browsers like google chrome it will be like lower case of "L".


Everyone must be aware of what's the difference of the phishing link and to the real MEW, just bookmark it.

yes so many phishing sites
that want to take your Private key.
Just bookmark the main MEW site.
so you can be safe bro.
and check the spelling and the
green bar at the Address bar .
that says "Secured"

you can download MetaMask to safe your money..
MetaMask is an extension of Google Chrome, you can easily to trading in EtherDelta with MetaMask

what the F.... Even me, i can't say that, that site is a pishing site ....These hackers/pishers are getting good all the time every one should be warned by these. They're good i can tell but why do bad things such scam? why not use their knowledge to help people...
I saw a lot of pishing site, but these one really catch my attention, we better don't let our guard down to avoid such misfurtune or been victimize by these.

Even In Google Search Engines. they Give you a Phishing site of MEW. and EtherDelta.
they are so Desperate to Get you Private KEy

That's very alarming. Good thing that I'm a lazy person that don't want to type and research sites again and again that I always use so I put a bookmark on it. So much money are pouring in crypto so we need to be extremely careful

now a lot of spam through Slack
they talk like ICO developers who advise us to add new tokens to MEW ..
but without realizing that the link is phishing

Thank you for posting a very valuable experience for us now, many phishing sites and spam sites through media accounts and messages in bitcointalk and this discussion is very useful for us to share.

that phishing site was really alarming, its hard to notice that it is even a phishing site, small different on the original MEW, that why we should bookmark for safety.

There are already plenty of users that are already been victims by these pushing sites. For all the users that are been already victim by these immoral pishing sites make this as a lesson and for those otger user make this as a warning, we are not perfect being we can't avoid having these mistakes but the most important of it is we learn from our mistakes and grow even stronger and wiser to avoid these bad happening to happen again. Having these pishing sites arounds is very alarming, we should be wise on all the decisions we are about to made specially when we are about to enter our private keys. To avoid these kund of issues, Its safe to bookmark the real website of mew, use metamask, ledger nano to make your account more secure, double checking the URL of the website before entering your private key, Avoid using public computers and pc use your own device or gadgets if possible, protect your private keys and don't let anyone to see and have it, avoid clicking a suggested link mentioned somewhere else that proclaiming that its shortcut to myetherwalletmyetherwallet and lastly have a safe and secure browsing.

thanks a lot sir. now iknow if anyone got scam and im aware of that scam.. maybe someone my friends told me that.. so now loud and clear to me..

we need to always double check on every site especially the sites that keep our coins like mew and I heard that many people get stolen their tokens and they cannot get their tokens back. I think if somehow our account in mew is getting hack, we can change the private keys and move the balance into the other mew wallet because I remember that I already discuss this with my friends and we agree that we need to move it fast before our tokens lost forever.

This is why its always been suggested for newbies to read up things on this forum in regards with possible scam or phishing attempts on where these informations would really be helpful into your crypto career.

We should really be sensible to our actions and bookmarking legit websites url isnt really that too hard yet it do only consume seconds in our time. Always be vigilant into the sites on where we do input important informations like private keys and other related stuffs that being used to access our wallet addresses.

This type of phishing is very hard to notice. But I stopped after seeing "we are committed to pay damages". Even those talented scammers can create a perfect imitation, you will still see some errors if you examine it closely.

That's why before complaining about the scammers we have to check ourselves before sending or clicking any link because we have to very careful in dealing when it comes to online. Daily we are seeing my phishing links to our mail, but try to understand and read them carefully before doing any task.

MEW users must be aware cause most of them are victims of phishing. I always suggest to every users of MEW to "think before they click " a certain link .

thanks for the advice bro im aware of that and im always thingking  sometimes if my mew is safe or not thats why i always check my ETH if im scammed :D .. #Beware Of MEW scam

Yes, we have to be very careful with the scammers, because they will try any sorts of tricks to steal the money from your wallet. Better dont fall to those tricks and you need to get awareness by checking their links. You need to secure yourself because we dont know whether it is good or bad, so confirm from the sources before doing anything.

Yeah your right, just think before click a link because some sites are using or link are almost the same by the MEW specially in terms of features. But there's something unique to MEW because they giving private key, they give it to the owner of the account to kept it in safe. But you are possible to become victims of phishing if you cannot take care your unique private key given to you.

thanks dude been warned, we do have to be more careful with, especially when entering the link wallet, I hope this doesn't happen again to all member here, and I hope we are not indiscriminate in visiting the given link by people, whether it be a link in a telegram or a link that is on every social media, I'll also be more careful in visiting the link and enter private key

that is called phishing link , it looks lime same as original site .
but it has some coding due to which only difference of 1 dot under any letter .
best way to save yourself is bookmark the right link . and never open such phishing mails .

I think everyone is aware about the phishing sites, but sometimes we fall from a kind of tricks that we didnt expect. Just like what happened to the OP.
Now, if in any case dont just click any link, no matter how it looks so real. Just always rely on your booked mark websites. Thats what I do everytime and I havent been a victim of phishing sites, hopefully not in the future as well lol  ;D

Yes, we have enough time to check and analyze the website without any problem, because once we send money to the fake address we cannot retrieve them. So it always good to check before sending coins, even while sending the ETH or BTC to ICO projects better check twice before sending.

the best thing that you can do is save your private keys in a safe place and maybe you can create a file that contains all of your private keys and only you that will know where the file location. make sure that when you visit into mew websites, double check the address link before you log in into that sites and make sure that your computer clean from any trojan or virus that might be in your computer.

Most people are facing the problems because they are not bothering on which website they are clicking, we have to protect our keys in the safe place but even though they kept them in the safe place, but they are sharing those Private keys to other people by clicking the dummy links.

Safest place for private key is paper wallet, but at some point everyone has to use that key.
If you enter that key to phishing site it doesn't matter any more how safe paper wallet was.
Also, people need to learn how to use metamask.

beware of whom ever who reads this thread because you might want to get fooled.

@op for your information , mew or myetherwallet is not a scam but there were many circulating news about mew  that said users of it this wallet have been hi jack but that isnt actually the mew's problem rather that is the mistake of the user. mew's security is pretty solid but the private keys option are the ones who is verry risky to use because of phishing attempts

I suggest , with better use other options to login our account and we should avoid using private keys from now on in order to ensure safetiness.